Oh, right. Added / system
Let me take a shot at clarifying my thinking.
*
A profile is a set of fields that are necessary to describe a particular
software/system area of interest.
*
Profile use cases are high level and illustrate a particular area or aspects of
that area.
*
However, while a profile contains necessary fields, it likely doesn’t include
fields to fully do the job for that area.
*
Most areas will require, in addition to the profile, the fields from the Core
and Software foundational profiles.
*
And they may require profiles from other areas.
*
It is also the case that a BOM might incorporate multiple areas. So different
mixes of profiles are possible.
* Usage examples, describe broadly and in detail, how a set of SPDX
profiles may be used address a particular business problem
From: Robert A Martin <[email protected]>
Date: Monday, May 18, 2026 at 2:08 PM
To: Philip Odence <[email protected]>; [email protected]
<[email protected]>
Subject: Re: SPDX outreach - ideas for outreach stories
Agreed - but we can’t just talk about software either…
Bob
From: Philip Odence <[email protected]>
Date: Monday, May 18, 2026 at 2:06 PM
To: Robert A Martin <[email protected]>; [email protected]
<[email protected]>
Subject: [EXT] Re: SPDX outreach - ideas for outreach stories
This Message Is From an External Sender
This message originates outside of MITRE. If you feel this is suspicious,
please report it via "Report Suspicious Email" button in Outlook.
Thanks, Bob. Sorry to get all semantic on you again, but I would be careful
with the term "business case.” That typically refers to an economic
justification for a course of action.
Let me take a shot at clarifying my thinking.
*
A profile is a set of fields that are necessary to describe a particular
software area of interest.
*
Profile use cases are high level and illustrate a particular area or aspects of
that area.
*
However, while a profile contains necessary fields, it likely doesn’t include
fields to fully do the job for that area.
*
Most areas will require, in addition to the profile, the fields from the Core
and Software foundational profiles.
*
And they may require profiles from other areas.
*
It is also the case that a BOM might incorporate multiple areas. So different
mixes of profiles are possible.
*
Usage examples, describe broadly and in detail, how a set of SPDX profiles may
be used address a particular business problem.
From: [email protected] <[email protected]> on behalf of
Martin, Robert A via lists.spdx.org <[email protected]>
Date: Monday, May 18, 2026 at 9:36 AM
To: [email protected] <[email protected]>
Subject: SPDX outreach - ideas for outreach stories
Idea Area 1:
Architecture of SPDX Profiles and their Use for capturing and conveying real
systems
Graphs and Simple BOMs - their use for enterprise analysis and real-time
decisions
Idea Area 2:
Explain how to use SPDX to describe business cases / usage scenario
Areas of Interest - explain how to use the various profiles to create a useful
SPDX file
How to create a page or two that explains the mix needed - look at
https://spdx.dev/learn/areas-of-interest/ai/<https://urldefense.us/v2/url?u=https-3A__spdx.dev_learn_areas-2Dof-2Dinterest_ai_&d=DwMGaQ&c=Al8V6E3U0yBSSEuVtdZbGtsvjPA49U3WmtZAsdW0D_Q&r=yyf_tMRBY80wjAUP82gpfmv0fTJk5mALsolNn8pXnYc&m=OuHcWHqyK3TqpAyZkYfVO4h3z_EdIxNovUS1OUqN5tIInpUdJG-IqMejlqkCK86s&s=0U6BQSl2OnGHQ16AqTTvqSocIyUGm-SxhHyatslmPkA&e=>
Bob
--
Robert (Bob) Martin
Sr. Software and Supply Chain Assurance Principal Eng.
Cyber Integration and Innovation Cell Department
Cyber Engineering Division
Center for AI, Cyber & Digital
MITRE Technology & Engineering
MITRE Corporation
781-271-3001o
781-424-4095c
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#1491): https://lists.spdx.org/g/Spdx-outreach/message/1491
Mute This Topic: https://lists.spdx.org/mt/119372742/21656
Group Owner: [email protected]
Unsubscribe: https://lists.spdx.org/g/Spdx-outreach/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
